Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am looking into using Shibboleth for authentication of webapplications at my organisation. I am very new to this subject and would like to read through some good tutorials, hands-on-lessons or whatever is out there to help newbies getting to know Shibboleth.

But so far I have not been able to find any tutorials that contain specific examples for each steps. I would like to get a running setup up somehow so I will be able to play around with it...

What I have found up to now: Official Documentation for Shibboleth 2 -- https://spaces.internet2.edu/display/SHIB2/Installation

I would appreciate any hints you can give me about additional information to Shibboleth.

Edit - more info:
The service provider is a Ubuntu Server 10.04 LTS.

share|improve this question
    
What kind of operation system is this? and what kind of webserver? –  cstamas May 18 '10 at 10:12
1  
+1. Most existing Shibboleth documentation is overly arcane and academic, and I am having a hard time finding basic examples to educate my coworkers. The word "shibboleth" is hard for outsiders to pronounce. The software "Shibboleth" is hard for outsiders to configure. This irony is amusing. –  Stefan Lasiewski Feb 2 '12 at 22:25
add comment

4 Answers 4

up vote 7 down vote accepted

The Swiss NREN has a good documentation on this topic:

http://switch.ch/aai/support/serviceproviders/

You will also need to understand the concepts and the SHIB2 wiki is good for that. Will you run your own Identity Provider? else you only need to install an Service Provider which is easier.

UPDATE: For ubuntu you will need this to install. You do not need to compile it from source. (Well, you should not.)

apt-get install libapache2-mod-shib2
share|improve this answer
1  
+1 I learned with these guides and slides. By the way, I was just answering when I saw your answer :( –  chmeee May 18 '10 at 10:25
    
@chmeee: never mind. The more people involved with SAML and Shibbleth the better ;-) +1 –  cstamas May 18 '10 at 13:09
    
We have a running identity provider somewhere. I only need to get a service provider up and running. (Of course setting up the identity provider would be sweet, but I guess I don't have time to play around with that as well...) –  fgysin May 19 '10 at 12:05
1  
+1 This site has some of the clearest Shibboleth documentation that I've seen. –  Stefan Lasiewski Feb 2 '12 at 22:18
1  
I spoke to the maintainer of those documents, and he updated the syntax to use the Shib 2.x syntax. Yay for communication. –  Stefan Lasiewski Feb 24 '12 at 20:03
show 4 more comments

SimpleSAMLphp supports Shibboleth and looks easier to install and configure than using mod_shib2.

share|improve this answer
add comment

www.testshib.org provides some good instructions, and they link to relevant portions of wiki.shibboleth.net .

They also provide a IdP and SP service to test different aspects of your Shibboleth installation.

This is one of the best things out there. The problem is that Shibboleth tries to be flexible so that it can work with different organizations, each with their own authentication schemes. This means that Shibboleth has many configuration options, which can be overwhelming for people new to Shibboleth.

share|improve this answer
add comment

The official tutorial is a little difficult to follow because you have to switch between the IdP and the SP. This tutorial provides a step-by-step guide and is very useful: http://csrdu.org/blog/2011/07/04/shibboleth-idp-sp-installation-configuration/

(Disclaimer: I manage the site and one of our group members wrote the tutorial.)

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.